From mboxrd@z Thu Jan 1 00:00:00 1970 From: Payal Rathod Subject: Re: a doubt about INPUT rule Date: Fri, 15 Aug 2003 22:16:29 +0530 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030815164629.GA2245@linux.local> References: <20030814064610.GA1701@linux.local> <1060759344.1711.13.camel@kermit> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: <1060759344.1711.13.camel@kermit> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Ralf Spenneberg Cc: Netfilter On Wed, Aug 13, 2003 at 09:22:25AM +0200, Ralf Spenneberg wrote: > --dport requires the definition of a protocol beforehand. It is only > defined when the protocol is either udp or tcp. Omitting the protocol or > using all does not work because icmp, esp, ah, etc. do not have a port. Ok. Got it now. Thanks a lot Ralf for the excellent mails so far. > Book: Intrusion Detection f?r Linux Server http://www.spenneberg.com Why is this ? in "f?r Linux Server" With warm regards, -Payal -- "Visit GNU/Linux Success Stories" http://payal.staticky.com Guest-Book Section Updated.